LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (http://www.linuxquestions.org/questions/slackware-14/)
-   -   Disabling IPv6 on Slackware 12 a good idea? (http://www.linuxquestions.org/questions/slackware-14/disabling-ipv6-on-slackware-12-a-good-idea-586359/)

[GOD]Anck 09-21-2007 11:57 AM

Disabling IPv6 on Slackware 12 a good idea?
 
Slackware 12 by default loads the ipv6 module and assigns interfaces an IPv6 address which several daemons then try to bind to.. I don't think I currently use IPv6 for anything* so I disabled it.. I know I could recompile a kernel without IPv6 support but for now I've turned it off through a file in modprobe.d:

Quote:

cat /etc/modprobe.d/ipv6
alias net-pf-10 off
alias ipv6 off
Is this a smart thing to do? Will I run into any problems if I disable IPv6 or remove it from the kernel completely? Will I lose any functionality, other than not being able to watch KAME's dancing turtle? :D What about security? I understand that, with IPv6 enabled, I would need to set up ip6tables alongside regular iptables for firewalling (or use pf instead).. can it be said then, that disabling ipv6 reduces the system's attack surface? Does support, or lack thereof, from my ISP factor in?

Input and suggested reading appreciated! :)

*I use NAT on my IPv4 network, don't do any 6to4 tunneling, and as far as I know, I don't connect to any IPv6 services.. though I'm not sure how transparent that is these days.

Okie 09-21-2007 12:17 PM

i even build my kernel without IPv6 support, no ISP that i know of uses it yet, IPv6 is still just vaporware, until my ISP requires it i wont bother with implementing it...

chances are your ISP does not use IPv6 either so it is safe to disable it if you wish...

danieldk 09-22-2007 05:50 AM

Quote:

Originally Posted by [GOD]Anck (Post 2899268)
I don't think I currently use IPv6 for anything* so I disabled it.. I know I could recompile a kernel without IPv6 support but for now I've turned it off through a file in modprobe.d:

The following single line should also do the trick:

Code:

blacklist ipv6
Blacklist disables all possible module aliases.

Quote:

Is this a smart thing to do? Will I run into any problems if I disable IPv6 or remove it from the kernel completely?
No, as long as your ISP allows IPv4 connections (probably still for a long time ;)), and there are no IPv6-only servers that you use, you will not run into problems.

Quote:

Will I lose any functionality, other than not being able to watch KAME's dancing turtle? :D
Of course, that alone is worth it ;).

Quote:

What about security? I understand that, with IPv6 enabled, I would need to set up ip6tables alongside regular iptables for firewalling (or use pf instead)..
Correct. Packet filtering for IPv6 has to be set up separately.


All times are GMT -5. The time now is 07:57 PM.